Don’t be so hard on yourself when things go badly and don’t be so proud of yourself when they go well. - Annie Dukes In the first part of our discussion on hacking in bets, we discussed that the more bets you can place (because you manage your

Oh, You didn’t tell him how long it’d really take did ya? - Montgomery Scott To end this series about time management, we should discuss one last skill that I think security testers need to master. Guessing. Some, more professional sorts of folk, might call it ‘estimating’ but

Life is poker, not chess - Annie Duke Security of an application/system isn’t a perfect information game. You are always playing with out a full picture of all the factors affecting the ‘security posture’ of any given system. If you were to factor in runtimes, shared libraries, server

Nothing will work unless you do - Coach John Wooden In the past article we talked about how processes, methods, and actions during an engagement are bets with time.  Despite the relentless nature of time itself, it can be a dear friend or a bitter enemy. It is the great